Security researchers have identified a potential supply chain malware attack on the Trust Wallet browser extension, version 2.68. The malicious code, disguised as an analytics tool, reportedly stole users' mnemonic phrases by sending them to a phishing domain, metrics-trustwallet[.]com. This domain is currently offline, but the attack highlights significant security concerns for users of the affected extension.